Member of Technical Staff, DevSecOps

Vapi
San Francisco, CA

Who this role is best for

Geared toward senior cloud security engineers comfortable with hardening multi-tenant infrastructure for regulated enterprises, particularly those with VoIP experience.

Best fit for

  • Senior ICs who automate security as code, not just enforce policies.
    — “Build automation as a security primitive
  • Collaborative security leads who embed guardrails in developer workflows.
    — “building guardrails developers actually use
  • Enterprise SaaS veterans with compliance toolkit expertise.
    — “Experience with compliance frameworks (SOC 2, ISO 27001, HIPAA)

Things to consider

  • Direct code contributions expected beyond security oversight.
    — “you can ship the fix, not just file the ticket
  • Must interface with Sales for enterprise customer trust-building.
    — “Be the authority Sales and GTM lean on

How to stand out

  • Showcase multi-tenant cloud security designs with audit trails.
    — “harden our multi-tenant infrastructure
  • Demonstrate shift-left automation in past CI/CD pipelines.
    — “catch regressions during code review and CI
  • Highlight VoIP security incidents you've remediated.
    — “Familiarity with VoIP / telephony security
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · TeamLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • build and harden security posture
  • partner with engineering and infosec
Typical background
cloud-native SaaSsecurity in multi-tenant cloud

Skills & requirements

Required

Cloud-native SaasSecurity In Multi-tenant CloudCode ReviewShift-left SecurityCollaboration With Engineering And Infosec

Preferred

Ci/cd Pipeline SecurityBackend Software EngineeringCompliance Frameworks

Stack & domain

DevSecOpsCloud-native SaasAWSKubernetesPostgreSQLVoipSecurityComplianceCi/cd PipelinesBackend Software EngineeringCollaborationCommunicationTelecommunicationsEnterprise Software

About the role

Original posting from Vapi via Ashby

Voice AI that resolves, not transfers.

Most phone systems trap callers in menus and scripts. Vapi is the platform for deploying voice agents that know your business and can listen, adapt, and resolve in minutes.

  • The numbers: 1 billion calls. 1 million developers. 10x enterprise ARR growth
  • The customers: Amazon Ring, ServiceTitan, New York Life, Intuit, Kavak, and thousands more, from YC startups to the Fortune 500
  • The news: a $50M Series B led by Peak XV Partners, with Bessemer Venture Partners, Kleiner Perkins, M12 (Microsoft's Venture Fund), Y Combinator, and our earlier backers. Total raised: $72M

ABOUT THE ROLE

Vapi is deployed for multiple large enterprises, including several Fortune 500s, across regions around the world (including the EU and Australia). We're hiring a DevSecOps Lead to build and harden the security posture of our product and underlying infrastructure as we scale upmarket — so we stay compliant, secure, and ahead of what regulated enterprise customers expect.

This is a hands-on senior IC / lead role reporting to Tejas Siripurapu in Core Engineering. You'll partner closely with InfoSec, Engineering, and GTM, and your work will directly determine how confidently the largest companies in the world can run on Vapi.

WHAT YOU'LL DO

  • Make Vapi's security posture world-class for the enterprise — shift security left, catch regressions during code review and CI, and harden our multi-tenant infrastructure as we onboard the Fortune 500.
  • Build automation as a security primitive — including agentic systems that run penetration tests against staging ahead of every release, and that auto-remediate issues as they surface.
  • Own the compliance roadmap end-to-end alongside InfoSec, including Drata and the automations that keep us audit-ready as we expand into new regions and regulated industries.
  • Partner deeply with Engineering, InfoSec, and GRC — building guardrails developers actually use, not ad-hoc controls bolted on after the fact.
  • Be the authority Sales and GTM lean on — giving prospects and enterprise customers the confidence that Vapi's security posture matches the trust they're placing in us.

WHO YOU ARE

MUST-HAVES

  • 5–10 years of engineering experience, with significant time in modern cloud-native SaaS — AWS, Kubernetes, Postgres, and ideally VoIP.
  • Strong understanding of security in a multi-tenant cloud environment serving regulated enterprise customers with many third-party integrations.
  • High proficiency writing and reviewing code — you can ship the fix, not just file the ticket.
  • Invested in shift-left security: catching regressions during code and test, not after production incidents.
  • Collaborative by default — you build guardrails with security, engineering, and GRC partners rather than operating as a lone wolf.
  • Hands-on by preference; comfortable as a senior IC or lead, not looking to step into pure management.

NICE-TO-HAVES

  • Direct experience securing CI/CD pipelines.
  • Background as a backend software engineer.
  • Experience with compliance frameworks (SOC 2, ISO 27001, HIPAA) and tools like Drata.
  • Familiarity with VoIP / telephony security and the failure modes of real-time systems.

HOW WE WORK

  • Build something worthy of love: We aim to build products and experiences customers genuinely love, not just tolerate.
  • Commit and follow through: We finish what we start and build trust by being people others can count on.
  • Why not today?: We value urgency and momentum. The fastest path to customer value usually wins.
  • Seek raw input: We go directly to customers, data, and teammates instead of relying on summaries or assumptions.
  • It's our problem: We operate as one team. We share credit, own mistakes together, and support each other when things get hard.
  • Be direct and kind: We give feedback clearly, respectfully, and without delay.

WHY VAPI

  • Define the future of human–AI interaction: Help pioneer a new era of voice-based AI products that are transforming how people and businesses communicate.
  • Own meaningful work at a breakout startup: Join early, take real ownership, and have a direct hand in building a category-defining company from the ground up.
  • Surround yourself with exceptional people: Work alongside a world-class team of engineers, operators, and builders backed by top-tier investors who believe in our mission.
  • Accelerate your career in a high-growth environment: Grow fast, take on big challenges, and unlock opportunities as we scale one of the most exciting platforms in AI.

WHAT WE OFFER

  • Competitive compensation: includes a strong base salary and meaningful equity ownership.
  • Comprehensive health coverage: medical, dental, and vision plans.
  • Flexible time off: take-what-you-need vacation policy with an emphasis on rest and balance.
  • Daily meals: catered lunches and dinners provided for in-office days.
  • Lifestyle & wellness stipends: monthly allowances to support rent, transportation, food, fitness, and mental well-being.
  • Professional development: annual learning stipends for courses, conferences, and upskilling.
  • Team connection: regular offsites, team events, and opportunities to build in-person relationships.

Source: Vapi careers (Ashby)

Similar roles